
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
File: U05nXomsmsMC9TCid1KM-Bo8UwY.mft (raw, json)
Hash identifier: 3Uu6eoXkRxENLSoMMR9Eo+Z9zmQTLrDy2JfjggblhYk=
Subject key identifier: 1E:E2:4D:E5:D5:0B:FA:AD:96:D0:DB:37:A5:A1:AA:29:14:2F:75:28
Authority key identifier: 53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06
Certificate issuer: /CN=A91CC1EB/serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306
Certificate serial: 0654
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
Manifest number: 063E
Signing time: Thu 16 Apr 2026 22:43:47 +0000
Manifest this update: Thu 16 Apr 2026 22:43:47 +0000
Manifest next update: Thu 23 Apr 2026 22:43:47 +0000
Files and hashes: 1: U05nXomsmsMC9TCid1KM-Bo8UwY.crl (hash: amYdwyY7RIQq4Qo95VcNtRclSlJsC/pLBLCiKWq3ARg=)
2: 5C0006B4E1B711EEA6D7F740C4F9AE02.roa (hash: JS+BkuUeBbAKOEIjpvSfqdX1PU3qVq3t7HBFZXPnHlc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl
rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:43:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1620 (0x654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC1EB, serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306
Validity
Not Before: Apr 16 22:43:47 2026 GMT
Not After : Apr 23 22:43:47 2026 GMT
Subject: CN=69e16623-90a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:04:5d:67:2c:33:ab:62:19:dc:b9:23:f2:6a:
c6:19:82:da:36:28:6e:ba:8c:9a:36:35:67:36:23:
8b:c7:e3:cf:2e:94:50:57:27:83:33:25:e5:4a:f1:
0e:f0:2f:72:4b:6e:a8:e4:51:a8:33:e6:8a:bf:f4:
db:ad:1a:78:97:42:b1:91:55:75:18:a3:91:df:6f:
c2:4b:ef:fc:2c:c9:da:03:77:f6:8a:ef:cd:5b:54:
87:d9:55:05:ab:b7:ef:78:49:e4:6c:fa:7a:1c:db:
63:51:d1:6b:39:75:0c:d4:de:6f:ca:52:5d:34:43:
e4:7b:0f:b2:bf:b7:79:8b:29:37:33:cb:6a:bf:77:
dd:c0:6b:46:56:5f:c0:99:89:f9:60:7a:00:9a:88:
d7:0d:5a:14:97:ae:dd:27:0a:48:5a:72:41:71:87:
74:7f:f2:5b:c9:a2:b9:e5:93:67:bc:14:19:11:a1:
cf:fd:95:8e:ec:d0:1c:6f:40:01:26:c2:17:1b:d0:
d6:d6:23:97:d7:0e:e3:59:7b:84:6a:1b:64:d4:38:
12:d5:40:4e:93:3d:49:68:91:35:fa:9e:4c:ed:42:
1c:4c:6d:fb:c8:f8:c8:fa:d5:45:2e:27:a3:2d:8b:
fb:97:36:4b:01:40:76:e3:02:30:43:ef:08:a9:87:
ce:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E2:4D:E5:D5:0B:FA:AD:96:D0:DB:37:A5:A1:AA:29:14:2F:75:28
X509v3 Authority Key Identifier:
keyid:53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:a3:6b:04:be:f6:a3:66:f7:b4:fa:19:d2:ac:c6:bf:ca:ca:
12:42:c3:30:36:98:af:bd:d0:d7:39:9e:88:56:52:bd:24:d6:
0a:d0:20:fd:02:46:66:6f:89:ea:9f:08:3e:c8:4c:01:db:5d:
82:54:7b:65:0c:36:d4:65:ce:98:f9:5e:3a:4c:ba:cf:87:11:
c2:64:e8:f9:66:c2:16:f1:73:76:70:23:5c:56:8f:8e:ce:2e:
fb:51:46:37:bb:8d:c0:c1:20:4f:fe:e8:68:e2:c6:65:fc:bf:
ec:f2:70:7e:fa:2d:f2:cb:bf:9f:4b:3b:c4:f5:e4:6b:ea:66:
a0:25:7a:ab:9d:53:18:4f:d8:c8:37:2e:96:c7:d6:26:57:ee:
63:3d:a3:55:a7:c2:da:ca:a7:75:f7:6e:d5:69:c8:b2:73:0b:
d8:26:d6:1a:c0:83:c5:2e:b5:f8:f7:94:60:87:4e:44:8c:05:
a2:81:8f:df:75:67:db:49:94:e5:43:73:da:59:0f:86:9c:7b:
2d:6b:fb:09:de:a0:5c:df:44:8f:8f:fb:0c:c4:e2:1f:e8:df:
52:cc:d9:99:99:73:cb:f0:6d:dd:8d:e2:33:8d:dc:c5:22:58:
31:94:d9:10:04:a8:83:49:22:ac:ea:0d:8e:ec:4e:93:a4:23:
51:55:9d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:07 2026 by rpki-client